(19) 



(12) 



EuropSisches Patentamt 
European Patent Office 
Office europ6en des brevets 




(11) 



EP0 801 192 A1 



EUROPEAN PATENT APPLICATION 

published in accordance with Art 1 58(3) EPC 

(43) Date of publication: (51) IntCI. 6 : E05B 49/00 
15.10.1997 Bulletin 1997/42 

1W i (86) International application nunrtber: 
(21) Application number: 95936770.7 PCT/JP95/02301 



(22) Date of f iling: 10.11.1995 



(87) International publication nunt>er: 

WO 96/15346 (23.05.1996 Gazette 19961/23) 



(84) Designated Contracting States: 
DEFRGB 

(30) Priority: 11.11.1994 JP 277409/94 

(71) Applicant 

KABUSHIK1 KAISHA TOKAI RIKA DENKI SEISA 

KUSHO 

Nlwa-gun Alchl-ken (JP) 

(72) Inventors: 

• MIZUNO, YoshlyuW 
ICKCTokal Rika DenkiSelsakusho 
Nlwa-gun, Alchl-ken 480-01 (JP) 

• KOKUBU, Sadao 

K.K.Tokal Rika DenW Seisakusho 
Nlwa-gun, Alchl-ken 480-01 (JP) 



• AOKI, Hisashl 

K.K-Tokal Rika DenW Seisakusho 
Nlwa-gun, Alchl-ken 480-01 (JP) 

• MIZUNO, TakashK 

JCHLTokal Rika DenW Seisakusho 
Nlwa-gun, Alchl-ken 480-01 (JP) 

• KOGA, Shln-lchl 

ttlCTokal Rika DenW Seisakusho 
Niwa-gun, Alchl-ken 480-01 (JP) 

(74) Representative: 

Drelss, Fuhlendorf, Steimle & Becker, 
Patentanwfilte 
Postfach 1037 62 
70032 Stuttgart (DE) 



CM 



O 
CO 



(54) 



VEHICLE STARTUP APPROVAL DEVICE AND METHOD OF REGISTERING IDENTIFICATION 
CODE 



(57) A vehicle startup approval device for encripBng 
an identification code, which is stored in an electronic 
key. A startup approval ECU (1) magnetically couples 
with a transmit-receive control circuit (6) of an electronic 
key (3) through an antenna (2) and an antenna (5) of the 
electronic key (3) in a state where the electronic key (3) 
is inserted into an ignition switch (4) and supplies 
power. The startup approval ECU (1) transmits a ran- 
dom number code when the ignition switch (4) is oper- 
ated to an ACC position. Upon receipt of the random 
number code, the transmit-receive control circuit (6) of 
the electronic key (3) converts a key code, which has 
been beforehand registered, into a return code through 
a predetermined code processing on the basis of the 
random number code, and sends back the return coda 
Upon receipt of the return code, the startup approval 
ECU (1) decodes it to a key code on the basis of the ran- 
dom number code, and outputs a startup approval sig- 
nal to an engine control ECU (7) when the key code 
matches the key code registered beforehand. 
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Description 
TECHNICAL FIELD: 



The present invention relates to a vehicle start-up 
permission device which permits the start-up of an 
engine when an identification code read from a trans- 
mitter-receiver coincides with a previously set identifica- 
tion code and to an identification code registering 
method in which a transmitter-receiver code for specify- 
ing the transmitter-receiver and a vehicle code for spec- 
ifying a vehicle are registered, as identification codes, in 
the transmitter-receiver and the vehicle start-up permis- 
sion device, respectively. 

BACKGROUND TECHNOLOGY: 

In order to improve security, ft has been recently 
suggested that in a vehicle, an electronic key be used 
in which, for example, a transmitting circuit is integrated 
with a mechanical key. In this structure, an identification 
code is transmitted from an electronic key in a state of 
being inserted in an ignition switch, and when the iden- 
tification code transmitted from the electronic key coin- 
cides with a previously set identification code, the 
electronic key is judged to be true and, based on this, an 
engine is caused to start up in accordance with a turn- 
ing operation of the electronic key. 

However, in the above-described conventional 
structure, the identification code itself is transmitted 
from the electronic key. and therefore, it is possible to 
read the identification code stored in the electronic key. 

DISCLOSURE OF THE INVENTION: 

The present invention has been achieved in view of 
the above-described circumstances and an object 
thereof is to provide a vehicle start-up permission 
device in which an identification code stored in a trans- 
mitter-receiver can be also kept secret, and to provide 
an identification code registering method in which 
respective identification codes stored in the transmitter- 
receiver and in the vehicle start-up permission device 
are kept secret and are registered both in the transmit- 
ter-receiver and in the vehicle start-up permission 
device. 

A first aspect of the present invention is a vehicle 
start-up permission device equipped with start-up per- 
mission means which permits start-up of an engine 
when an identification code read from a transmitter- 
receiver coincides with a previously set identification 
code, wherein the start-up permission means includes 
random number code transmission means for transmit- 
ting a random number code prepared on the basis of a 
predetermined procedure, the transmitter-receiver 
includes return code transmission means which con- 
verts, by predetermined encryption processing, an Iden- 
tification code for specifying the transmitter-receiver to a 
return code on the basis of the random number code 
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transmitted from the random number code transmission 
means and transmits the return code, and the start-up 
permission means further includes identification code 
restoring means for restoring the return code transmrt- 
5 ted from the return code transmission means to an iden- 
tification code on the basis of the random number code 
of the random number code transmission means. 

In accordance with this aspect of the present inven- 
tion, the random number code transmission means pro- 
10 vided in the start-up permission means prepares and 
transmits the random number code by a predetermined 
procedure. The return code transmission means pro- 
vided in the transmitter-receiver converts, by predeter- 
mined encryption processing, the identification code for 
is specifying the transmitter-receiver to the return code on 
the basis of the random number code transmitted from 
the random number code transmission means and 
transmits the return code. The identification code restor- 
ing means provided in the start-up permission means 
so restores the return code transmitted from the return 
code transmission means to the identification code, and 
when the restored identification code coincides with the 
previously set identification code, the identification code 
restoring means enables the start-up of the engine. As 
25 a result, the identification code stored in the transmitter- 
receiver can also be kept secret 

In this case, at least one of the transmitter-receiver 
code for specifying the transmitter-receiver and the 
vehicle code for specifying a vehicle may be set as the 
so identification code. As a result the return code trans- 
mission means provided in the transmitter-receiver is 
provided to convert the random number code transmit- 
ted from the random number code transmission means 
provided in the start-up permission means to the return 
ss code on the basis of at least one of the transmitter- 
receiver code for specifying the transmitter-receiver and 
the vehicle code for specifying a vehicle and to transmit 
the return code. Accordingly, for example, in a case in 
which the random number code is converted to the 
40 return code on the basis of both the transmitter-receiver 
code and the vehicle code, the confidentiality of the 
identification code stored in the transmitter-receiver can 
be improved still further. 

Furthermore, the random number code transmis- 
45 sion means may be provided to transmit the random 
number code in an updated state each time. As a result, 
the random number code transmission means provided 
in the start-up permission means prepares the random 
number code in an updated state each time, and there- 
so fore, as compared to a case in which an identical ran- 
dom number code is continuously transmitted multiple 
times, reading of the random number code becomes dif- 
ficult Accordingly, the confidentiality of the identification 
code stored in the transmitter-receiver can be inwoved 
55 still further. 

Moreover, the random number code transmission 
means may be provided to prepare the random nunfcer 
code In a different manner for each of the vehicle types 
or for each f the vehicles. As a result, the random 
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number code transmission means provided in the start- 
up permission means prepares the random number 
code in a different procedure for each of the vehicle 
types or for each of the vehicles, and therefore, unlike a 
case in which random number code preparing means in 
the random number transmission means of all vehicles 
are all the same, the confidentiality of the identification 
code of the transmitter-receiver can be improved still 
further. 

A second aspect of the present invention is an iden- 
tification code registering method in which a transmitter- 
receiver code for specifying a transmitter-receiver and a 
vehicle code for specifying a vehicle are respectively 
registered, as identification codes, in the transmitter- 
receiver and in a vehicle start-up permission device 
which permits start-up of an engine when an identifica- 
tion code read from the transmitter-receiver coincides 
with a previously set identification code, the method 
comprising the steps of: (A) registering the transmitter- 
receiver code and the vehicle code in the transmitter- 
receiver and the vehicle start-up permission device, 
respectively; (B) transmitting a random number code 
prepared on the basis of a predetermined procedure in 
the vehicle start-up permission device, converting by 
predetermined encryption processing the transmitter- 
receiver code to a return code on the basis of the ran- 
dom number code received by the transmitter-receiver 
to transmit the return code, restoring the return code 
received by the vehicle start-up permission device to 
the transmitter-receiver code on the basis of the trans- 
mitted random number code, and registering the trans- 
mitter-receiver code in the vehicle start-up permission 
device; and (C) in the vehicle start-up permission 
device, converting by predetermined encryption 
processing the vehicle code to a random number vehi- 
cle code on the basis of the random number code to 
transmit the random number vehicle code, restoring the 
random number vehicle code received by the transmit- 
ter-receiver to the vehicle code, and registering the 
vehicle code in the transmitter-receiver. 

In accordance with this aspect of the present inven- 
tion, the identification codes are respectively registered 
in the transmitter-receiver and the vehicle start-up per- 
mission device, which codes being provided to specify 
the transmitter-receiver and the vehicle start-up permis- 
sion device, and thereafter, the vehicle code and the 
transmitter-receiver code can be registered in the trans- 
mitter and the vehicle start-up permission device, 
respectively. For this reason, H becomes unnecessary 
to manage the vehicle 6tart-up permission device and 
the transmitter-receiver in an integrated manner until 
these codes are registered. Further, since the random 
number code, the return code, and the random number 
vehicle code are transmitted to be registered and the 
identification code itself is not transmitted, the identifica- 
tion code can be kept secret. Meanwhile, in this case, 
step (C) may be executed prior to step <B). 



BRIEF DESCRIPTION OF THE DRAWINGS: 

Fig. 1 1s a schematic diagram which shows an over- 
all structure in a first embodiment of the present Irtven- 
5 tion. 

Fig. 2 is a functional block diagram which shows a 
start-up permission ECU. * 

Rg. 3 is a functional block diagram which shows a 
transmit-receive controlling circuit of an electronic key. 
io Fig. 4 is a diagrammatic view which shows overall 
structure and operation. 

Rg. 5 is a flowchart which shows the operation of a 
start-up permission ECU. 

Rg. 6 is a flowchart which shows the operation of a 
15 transmit-receive controlling circuit of the electronic toy. 
Rg. 7 is a flowchart which shows a subroutine of 
step S20 shown in Rg. 5. 

Rg. 8 is a flowchart which shows a subroutine of 
step T1 0 shown in Rg. 6. 

20 BEST MODE FOR IMPLEMENTING THE INVENTION: 

Referring now to the attached drawings, the present 
invention will be hereinafter described in detail. 
26 Rg. 1 schematically shows an overall structure. In 
this figure, a start-up permission ECU (Electronic Con- 
trol Unit) 1 . which serves as start-up permission means, 
random number code transmitting means, and identifi- 
cation code transmitting means, includes a con 2 and is 
30 electromagnetically coupled via the coil 2 with an elec- 
tronic key 3 serving as a transmitter-receiver. 

in other words, the coil 2 is disposed in 6uch a man- 
ner as to correspond to an ignition switch 4. and with the 
electronic key 3 inserted in the ignition switch 4, the coil 
55 2 is electromagnetically coupled with a coil 5 of the elec- 
tronic key 3 so as to supply electric power for a transmit- 
receive controlling circuit 6 and an identification code is 
read from the transmit-receive controlling circuit 6. 
Here, when the start-up permission ECU 1 receives 
40 an ACC signal (Le., a signal which indicates that the 
switch is operated at an ACC position), the start-up per- 
mission ECU 1 communicates with the transmit-receive 
controlling circuit 6 of the electronic key 3. When the 
electronic key 3 Is judged to be true, the start-up per- 
46 mission ECU 1 outputs a start-up permission signal to 
an engine-controlling ECU 7. 

The engine-controlling ECU 7 receives an ON sig- 
nal from the ignition switch 4 (i.e., a signal which indi- 
cates that the switch is operated at an ON position) and 
60 a START signal from the ignition switch 4 (i.e., a signal 
which indicates that the switch is operated at a START 
position) in a state in which the start-up permission sig- 
nal is input to the engine-controlling ECU 7, and when 
the engine-controlling ECU 7 accepts the START signal, 
65 His provided to start up an engine by driving a starter of 
the engina 

Rg. 2 is a functional block diagram of the start-up 
permission ECU 1. In this figure, when the electronic 
key 3 inserted in the ignition switch 4 is operated at the 



3 



EP0 801 192 A1 



ACC position, a random number code generating circuit 

8 generates random numbers and the random numbers 
are stored in a random number code holding register 9. 
A modulation circuit 10 modulates the random number 
code stored in the random number code holding register 5 

9 by an oscillating frequency of an oscillating circuit 1 1 
to a transmission signal and outputs the modulated sig- 
nal to an output circuit 12. The output circuit 12 trans- 
mits the transmission signal from the modulation circuit 

10 via the coil 2. 

10 

When it is determined by a receiving circuit 13 that 
the electronic key 3 is inserted in the ignition switch 4, 
on the basis of a signal received via the antenna 2, the 
receiving circuit 13 sends an instruction to a power 
source control circuit 14. When the power source con- is 
trol circuit 14 receives the instruction from the receiving 
circuit 13, it outputs power source voltage from a battery 
15 to each of the circuits which form the start-up permis- 
sion ECU 1 with the power source voltage being stabi- 
lized at a control power source voltage. so 

Further, the receiving circuit 13 outputs the signal 
received from the coil 2 in such a manner that the signal 
is subjected to waveform shaping processing through a 
waveform shaping circuit 16. A synchronous circuit 17 
separates a synchronous signal included in the 25 
received signal from the waveform shaping circuit 16. A 
clock circuit 18 outputs a clock signal in accordance 
with the synchronous signal of the synchronous circuit 
17. A code restoring circuit 19 restores (decodes) a ran- 
dom number code and a key code by inputting the so 
received signal from the waveform shaping circuit 16 
synchronously with the clock signal from the clock cir- 
cuit 18. In this case, the random number code and the 
key code can be restored in such a manner that a pre- 
determined calculation is effected for the received sig- 35 
nal on the basis of a vehicle code. Meanwhile, the code 
restoring circuit 19 includes a 4> 8 determination circuit 
not shown, for making a determination for which indi- 
cates that a vehicle code. S, (which will be described 
later) is blank (La, vehicle code S is not registered in a 40 
nonvolatile memory of the electronic key 3). 

A code determination circuit 20 is formed from a 
random number code shift register 21 and a key code 
shift register 22 and determines whether the random 
number code and key code received from the code 45 
restoring circuit 1 9 is true or not. 

Namely, the random number code shift register 21 
stores the random number code transmitted from the 
code restoring circuit 19 by a shift operation. Further, 
the key code shift register 22 stores the key code trans- so 
mitted from the code restoring circuit 19 by shift opera- 
tion. A random number code collating circuit 23 
compares the random number code stored in the ran- 
dom number code shift register 21 and the random 
number code stored in the random number code hold- ss 
ing register 9. Further, a key code collating circuit 24 
compares a key code stored in a key code shift register 
22 and a key code previously registered in a nonvolatile 
memory. In this case, when it is determined by the ran- 



dom number code collating circuit 23 that both random 
number codes coincide with each other, it is possible to 
determine that communication between the electronic 
key 3 and the start-up permission ECU 1 was made nor- 
mally. Accordingly, when the communication between 
the electronic key 3 and the start-up permission ECU 1 
is made normally and it is determined by the key code 
collating circuit 24 that both key codes coincide with 
each other, it is possible to determine that the proper 
electronic key 3 is used. When the random number 
code and the key code coincide with each other as 
described above, the code determination circuit 20 out- 
puts a start-up permission signal to the engine-control- 
DngECU7. 

Further, the key code collating circuit 24 includes a 
flag determination circuit not shown, for determining 
whether a flag of key code K, described later, is set up 
and a write circuit, not shown, for writing the key code K 
into a nonvolatile memory of the start-up permission 
ECU 1 . The key code collating circuit 24 is connected to 
the code restoring circuit 19. In addition, a P calculation 
circuit 40, described later, is provided in the start-up 
permission ECU 1 and the P calculation circuit 40 is 
connected to the above-described code restoring circuit 
19 and also to the modulation circuit 10. 

Meanwhile, although in Fig. 2 the start-up permis- 
sion ECU 1 is shown in a functional block diagram, the 
start-up permission ECU 1 is mainly formed of a micro- 
computer. 

Fig. 3 shows the transmit-receive controlling circuit 
6 of the electronic key 3 in a functional block diagram. In 
this figure, an electric power receiving circuit 25 stabi- 
lizes electric power received by a receiving antenna 5 at 
a predetermined control power source voltage and out- 
puts the same. A signal receiving circuit 26 outputs the 
signal received by the receiving antenna 5 in such a 
manner that the received signal is set in a state of being 
shaped by the waveform shaping circuit 27. A synchro- 
nous circuit 28 separates a synchronous signal included 
in the received signal from the waveform shaping circuit 
27. A clock circuit 29 outputs a clock signal in accord- 
ance with the synchronous signal of the synchronous 
circuit 28. 

A random number code shift register 30 stores, by 
a shift operation, a random number code included in the 
received signal from the waveform shaping circuit 27 in 
accordance with the clock signal from the clock circuit 
29. A key code shift register 30 stores a key code stored 
in a nonvolatile memory by a shift operation. A vehicle 
code shift register 32 stores a vehicle code stored in a 
nonvolatile memory by a shift operation. 

A code generating circuit 33 generates a return 
code by predetermined encryption processing on the 
basis of the respective codes stored in the random 
number code shift register 30, the key code shift register 
31, and the vehicle code shift register 32. 

A modulating circuit 34 modulates a modulation 
code from the code generating circuit 33 by an oscillat- 
ing frequency from an oscillating circuit 35 to generate a 
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return code. An output circuit 36 transmits the return 
code from the modulation circuit 34 through the antenna 
5. 

Further, the electronic key 3 is provided with a vehi- 
cle code determination circuit 50 for determining s 
whether or not vehicle code S (vehicle code S« 
has been registered in a nonvolatile memory of the elec- 
tronic key 3. The vehicle code determination circuit 50 
includes a flag determination circuit not shown, for 
determining whether a flag of vehicle code S is set (he.. » 
whether vehicle code S has been already registered 
without 4> 8 being indicated) and a write circuit not 
shown, for writing vehicle code S in the nonvolatile 
memory. The vehicle code determination circuit 50 is 
connected to the above-described vehicle code shift is 
register 32 and also to the nonvolatile memory. 

Meanwhile, although in Fig. 3 the transmit-receive 
controlling circuit 6 of the electronic key 3 is shown in a 
functional block diagram, the transmit-receive control- 
ling circuit 6 is mainly formed of a microcomputer. 20 

Fig. 4 is a diagrammatic view showing the overall 
structure and operation. In this f igure, a vehicle can be 
provided with at most three electronic keys, A. B, and C, 
including a preliminary key. Separate key codes each 
serving as an identification code for specifying a proper 26 
electronic key are set for these electronic keys A. B, and 
C and an identical vehicle code can be registered in 
each of these electronic keys. 

Namely, key codes K1 . K2, and K3 are set for elec- 
tronic keys A, B, and C. respectively. Further, identical so 
vehicle code S1 can be registered in each of electronic 
keys A, B, and C. 

On the other hand, three key codes at most can be 
registered in the vehicle. Namely, key codes K1 . K2, and 
K3 can be registered so as to correspond to the three 55 
electronic keys A. B, and C. respectively. Meanwhile, 
key-code setting for the electronic key 3 and vehicle- 
code setting for the start-up permission ECU 1 can be 
effected in such a manner that for example, these 
codes are electronically written in by a predetermined to 
write device. Further, registration of the vehicle code in 
the electronic key 3 and registration of the key code in 
the start-up permission ECU 1 can be effected in 
accordance with a predetermined procedure, which will 
be described later. 46 

Next an operation of the above-described structure 
will be described. 

When the electronic key 3 is inserted in the ignition 
switch 4, the start-up permission ECU 1 applies a high- 
frequency electric power to the coil 2. As a result so 
induced electromotive force is generated in the coil 5 of 
the electronic key 3, and therefore, electric power is 
supplied for the transmit-receive controlling circuit 6, 
and in accordance with the supply of electric power, the 
transmit-receive controlling circuit 6 starts operating. 65 

Fig. 5 shows operation of the start-up permission 
ECU 1 and Fig. 6 shows the operation of the transmit- 
receive controlling circuit 6 of the electronic key 3. The 
start-up permission ECU 1 is first set in a waiting state 



until the ACC signal is input from the ignition switch 4 
(step S1 of Fig. 5). 

When a driver effects a turning operation of the 
electronic key 3 to the ACC position so as to start up the 
engine, the start-up permission ECU 1 generates a ran- 
dom number code (step S2). In this case, the start-up 
permission ECU 1 is provided to generate random 
number code Rn in an updated state each time the ACC 
signal is input (operation 1 shown in Fig. 4). At this time, 
an calculation expression for preparing random number 
code Rn is set to be different for each type of vehicle or 
for each of vehicles for the reason that the random 
number prepared by a predetermined calculation 
expression has period characteristics and by under- 
standing the period characteristics, decoding of the ran- 
dom number code becomes relatively facilitated. 

Subsequently, the start-up permission ECU 1 trans- 
mits the generated random number code (step S3). As 
a result the random number Rn is transmitted from the 
coil 2 of the start-up permission ECU 1 (see Fig. 4). 

In this state, the start-up permission ECU 1 is set in 
a waiting state until it receives the received signal from 
the electronic key 3 (step S4). 

On the other hand, the transmit-receive controlling 
circuit 6 of the electronic key 3 is set in a waiting state 
until it receives the received signal from the start-up per- 
mission ECU 1 (step T1 in Fig. 6), and determines 
whether random number code Rn has been received or 
not at the point in time when the received signal was 
received (step T6). When it is determined that random 
number code Rn has been received, the transmit- 
receive controlling circuit 6 receives random number 
code Rn indicated by the received signal (step T2). 

Subsequently, the transmit-receive controlling cir- 
cuit 5 reads the key code and the vehicle code from the 
nonvolatile memory (step T3), generates the return 
code on the basis of the key code and the vehicle code 
(step T4), and transmits the return code (step T5). 

In other words, the transmit-receive controlling cir- 
cuit 6 prepares the return code, Q, by effecting prede- 
termined encryption processing for a key code, K1, 
which is previously stored on the basis of received ran- 
dom number code Rn and a previously stored vehicle 
code. S1. Concretely, the transmit-receive controlling 
circuit 6 prepares return code Q by using key code K1 
and vehicle code S1 on the basis of random number 
code Rn received with electric power being supplied by 
the coil 4 and in accordance with a predetermined 
encryption calculation expression. Q « f (R. K, S) (see 
Rg. 4), and transmits the same through the coil 5. 
Meanwhile, when the key code of the electronic key 3 
has not been registered, encryption calculation expres- 
sion Q is set to be equal to f(R. 4> K . S) according to + K 
which indicates that key code K is Wank, which will be 
described later. 

After the start-up permission ECU 1 has received 
the random number code as described above, it is 
brought into a state of receiving the received signal 
(step S4 in Fig. 5), receives return code Q Indicated by 
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the received signal when the received signal is received 
(step S5 and operation 2 in Fig. 4), and determines 
whether or not vehicle code S is blank (step SI 3 
and the code restoring circuit 19 shown in Fig. 2). Since 
the vehicle code has already been registered unless it fs 
blank {^), the start-up permission ECU 1 reads the 
vehicle code from the nonvolatile memory (step S6) and 
decodes a random number code arid a key code from 
the nonvolatile memory on the basis of the vehicle code 
(step S7). 

Subsequently, the start-up permission ECU 1 reads 
the random number code from the nonvolatile memory 
(step S8) and determines whether the two random 
number codes coincide with each other (step S9). At 
this time, when the two random number codes are dif- 
ferent from each other, it is determined that communica- 
tion between the electronic key 3 and the start-up 
permission ECU 1 is incorrect and the routine proceeds 
to step S2, in which communication therebetween is 
executed again. 

Further, when the two random number codes coin- 
cide with each other, the start-up permission ECU 1 
makes a determination that communication with the 
electronic key 3 is normal, reads a key code from the 
nonvolatile memory (step S10). and determines 
whether these two key codes coincide with each other 
(step 31-1). At this time, when the read key code coin- 
cides with any one of the three types of key codes, K1 . 
K2, and K3, previously registered (operation 4 in Fig. 4), 
the start-up permission ECU 1 outputs the start-up per- 
mission signal to the engine-controlling ECU 7. 

Accordingly, when the engine-controlling ECU 7 
inputs the START signal from the ignition switch 4 with 
the start-up permission signal being input from the start- 
up permission ECU 1, the engine-controlling ECU 7 
drives a starter to start up the engine. 

On the other hand, when It is determined in step 
S13 that vehicle code S Is blank (<y , in step S20. the 
key code registering processing shown in Fig. 7 is exe- 
cuted. First, in step S21, on the basis of the determina- 
tion made about whether all of the flags of storage areas 
A, B. and C (see Fig. 4) of the key codes of the nonvol- 
atile memory of the start-up permission ECU 1 are set 
It is determined whether key codes K1 , K2, and K3 have 
already been registered In all of storage areas A, B, and 
C of the key codes of the nonvolatile memory of the 
start-up permission ECU 1 (a flag determination circuit 
not shown, of the key code collating circuit 24 shown in 
Fig. 2). 

When the decision of step S20 is yes, the three key 
codes have already been registered and further key 
codes cannot be stored, and therefore, the routine 
returns to step S20 and the routine of the start-up per- 
mission ECU 1 ends. Further, when the decision of step 
S20 is no, in the next step S22, key code K Is decoded 
from return code Q (the key code shift register 22 and 
the key code collating circuit 24 shown in Fig. 2). In sub- 
sequent step S23. key code K Is stored in the nonvola- 
tile memory of ECU 1 (a write circuit not shown, of the 



key code collating circuit 24 shown in Fig. 2), and in step 
S24, the flag is set Meanwhile, the writing (registering) 
processing of key code K is effected in the order of A. B. 
and C and the flags are respectively set in this order. As 
5 a result, the registering processing of key code K of the 
electronic key 3 in the start-up permission ECU 1 is 
completed. 

In subsequent step S25, random number vehicle 
code P is transmitted to the electronic key 3, a subrou- 
10 tine of the key code registering processing ends, and 
the routine returns to step S20, and as a result the rou- 
tine of the start-up permission ECU 1 ends. Note that 
random number vehicle code P is a code represented 
by the encryption calculation expression 
is P«f(R. $ K , S); specifically, R indicates a random 
number code represented by Rn as shown in Fig. 4, * K 
indicates that key code K of the electronic key 3 is not 
registered (i.e., blank) in the start-up permission ECU 1 , 
and S indicates the vehicle code as described above,* 
20 concretely, S1 . This calculation processing is effected in 
the P calculation circuit 40 shown in Fig. 2. As a result, 
the modulation circuit 10 sends a modulated wave 
according to the above-described encryption calculation 
expression, P « f(R, * K , S) . to the output circuit 12. 
25 When random number vehicle code Pis transmitted 
to the electronic key 3, the electronic key 3 is different 
from random number code Rn in step T6 shown in Fig. 
6, and therefore, the decision of step T6 is no. In step 
T10, the vehicle code registering processing shown in 
30 Fig. 8 is executed. 

First, in step T1 1 , it is determined whether random 
number vehicle code P (i.e.. the code on the basis of the 
above-described encryption calculation expression 
P » f (R, <fr K , S)) exists or not When the decision of 
ss step T1 1 is no, it is determined that an incorrect signal 
such as a noise signal or the like has been received and 
the routine returns to step T10. When the decision of 
step T11 is yes. in subsequent step T12, random 
number vehicle code P is received. In the next step T13, 
40 on the basis of the determination made about whether 
the flag of the storage area S (see Fig. 4) of the vehicle 
code of the nonvolatile memory of the electronic key 3 is 
set, it is determined whether vehicle code S has already 
been registered In the nonvolatile memory of the elec- 
45 tronlc key 3 (a flag determination circuit, not shown, of 
the vehicle code determination circuit 50 shown in Fig. 
3). When the decision of step T13 is yes, the routine 
returns to step T10. When the decision of step T13 is 
no, in the next step T14, the vehicle code S1 is decoded 
so from random number vehicle code P (the vehicle code 
shift register 32 and the vehicle code determination cir- 
cuit 50 shown in Fig. 3). In subsequent step T15, vehicle 
code S1 is stored in the nonvolatile memory of the elec- 
tronic key 3 (a write circuit, not shown, of the vehicle 
ss code determination circuit 50 shown in Fig. 3). In the 
next step T16, the flag of vehicle code S Is set up so as 
to avoid the overlapping of registration, and thereafter, 
the process returns to step T10 and the routine of the 
electronic key 3 ends. 
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In accordance with the above<Jescribed structure, 
the start-up permission ECU 1 transmits the random 
number code to the electronic key 3. the electronic key 
3 generates and transmits the return code by the 
encryption processing of a key code on the basis of the s 
random number code received from the start-up per- 
mission ECU 1 and the previously-stored vehicle code, 
the start-up permission ECU 1 decodes, on the basis of 
the vehicle code, the return code received from the 
electronic key 3 to the random number code and the key w 
code, and only when the key code coincides with a pre- 
viously-registered key code. It outputs the 6tart-up per- 
mission signal to the engine-controlling ECU 7. 
Accordingly, unlike a conventional structure in which an 
identification code itself is returned from the electronic is 
key. the key code serving as the identification code 
stored in the electronic key 3 can further be kept secret 

Further, when the return code is prepared in the 
electronic key 3, the return code is prepared on the 
basis of the previously registered vehicle code in addi- 20 
tion to the random number code received from the start- 
up permission ECU 1. For this reason, the confidential- 
ity of the key code stored in the electronic key 3 can be 
further improved. 

Moreover, the start-up permission ECU 1 Is pro- 2s 
vided to transmit the random number code in an 
updated state each time, and therefore, the random 
number code and the return code are each provided to 
be different each tima Accordingly, as compared to a 
structure in which the identical random number codes so 
are continuously transmitted, the confidentiality of the 
key code can be further improved. 

In addition, the calculation expression used to pre- 
pare the random number code for each type of vehicle 
or for each of vehicles is set differently, and therefore, ss 
the confidentiality of the key code can be further 
improved. 

The present invention is not limited to the above- 
described embodiment, and various modifications or 
extension as described below may be made 40 

Only the key code or vehicle code may be stored in 
the transmit-receive controlling circuit 6 of the electronic 
key 3. 

The electronic key 3 may also be constructed such 
that with no mechanical key being used and with only 45 
the transmit-receive controlling circuit 6 being provided 
therein, the ignition switch 4 may be operated by other 
operating means. 

The communication between the start-up permis- 
sion ECU 1 and the transmit-receive controlling circuit 6 so 
of the electronic key 3 may be effected in an optical 
manner. 

When the electronic key 3 is inserted in the ignition 
switch 4. the start-up permission ECU 1 may transmit 
the random number code to the electronic key 3 so as to ss 
determine whether the electronic key Is true or falsa 

In the above-described embodiment in step S13, it 
is determined from return code Q whether vehicle code 
S is blank (4*). However, in place of the decision made 



in step S13, the determination may be made about 
whether key code K has been registered in the nonvola- 
tile memory of the start-up permission ECU 1 after step 
81. Further, in this case, although the determination is 
made about whether the random number code exists or 
not In step T6, a determination may be made about 
whether vehicle code K Is stored in the electronic key 3. 

Further, in the above-described embodiment, after 
the registration of key code K in the nonvolatile memory 
of the start-up permission ECU 1, vehicle code S is reg- 
istered in the nonvolatile memory of the electronic key 3. 
However, random number code Rn and random number 
vehicle code P are transmitted from the start-up permis- 
sion ECU 1, and the determination is made about 
whether or not vehicle code S is stored in the electronic 
key 3. When vehicle code S is not stored and if vehicle 
code S is decoded, vehicle code S can be previously 
registered in the electronic key 3. In addition, in this 
case, so long as random number code Rn is not trans- 
mitted from the start-up permission ECU 1 and random 
number vehicle code P is first transmitted, it is possible 
to reduce the time for transmission of random number 
code Rn. and therefore, the time for registration can 
also be reduced. 

INDUSTRIAL AVAILABILITY: 

As described above, the vehicle start-up permis- 
sion device and the identification code registering 
method according to the present invention allow the 
identification code to be kept secret and therefore, the 
present invention is effective in that a vehicle 16 exclu- 
sively possessed by a proper possessor, and the Identi- 
fication code registering method allows the vehicle 
start-up permission device and a transmitter to be sep- 
arately managed until both identification codes are reg- 
istered. Accordingly, in the automobile industry with the 
division of a manufacturing process being advanced, 
the present invention is also effective in that the man- 
agement aspect in production and marketing of vehicles 
is alleviated. 

Claims 

1 . A vehicle start-up permission device equipped with 
start-up permission means which permits start-up 
of an engine when an identification code read from 
a transmitter-receiver coincides with a previously 
set identif ication code, 

wherein said start-up permission means 
includes random number code transmission 
means for transmitting a random number code 
prepared on the basis of a predetermined pro- 
cedure, 

said transmitter-receiver includes return code 
transmission means which converts, by prede- 
termined encryption processing, an identifica- 
tion code for specifying said transmitter- 
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receiver to a return code on the basis of the 
random number code transmitted from said 
random number code transmission means and 
transmits the return code, and 
said start-up permission means further s 
Includes Identification code restoring means for 
restoring the return code transmitted from said 
return code transmission means to an identifi- 
cation code on the basis of the random number 
code of said random number code transmis- 10 
sion means. 

2. A vehicle start-up permission device according to 
claim 1, wherein at least one of a transmitter- 
receiver code for specifying said transmitter- is 
receiver and a vehicle code for specifying a vehlde 

is set as an identification code. 

3. A vehicle start-up permission device according to 
any one of claims 1 and 2, wherein said random 20 
number code transmission means prepares a ran- 
dom number code in an updated state each time. 

4. A vehicle start-up permission device according to 
any one of claims 1 through 3. wherein said random 25 
number code transmission means prepares a ran- 
dom number code in a different procedure for each 

of the vehicle types or for each of the vehicles. 

5. An identification code registering method in which a so 
transmitter-receiver code for specifying a transmit- 
ter-receiver and a vehicle code for specifying a 
vehicle are respectively registered, as identification 
codes, In the transmitter-receiver and in a vehicle 
start-up permission device which permits start-up as 
of an engine when an identification code read from 

the transmitter-receiver coincides with a previously 
set Identification code, said method comprising the 
steps of: 

40 

(A) registering the transmitter-receiver code 
and the vehicle code in the transmitter-receiver 
and the vehicle start-up permission device, 
respectively; 

(B) transmitting a random number code pre- 45 
pared on the basis of a predetermined proce- 
dure in the vehicle start-up permission device, 
converting by predetermined encryption 
processing the transmitter-receiver code to a 
return code on the basis of the random number so 
code received by the transmitter-receiver to 
transmit the return code, restoring the return 
code received by the vehicle start-up permis- 
sion device to the transmitter-receiver code on 

the basis of the transmitted random nurrtoer ss 
code, and registering the transmitter-receiver 
code in the vehicle start-up permission device; 
and , 

(C) In the vehicle start-up permission device. 



converting by predetermined encryption 
processing the vehicle code to a random 
number vehicle code on the basis of the ran- 
dom number code to transmit the random 
number vehicle code, restoring the random 
number vehicle code received by the transmit- 
ter-receiver to the vehicle code, and registering 
the vehicle code in the transmitter-receiver. 

6. An identification code registering method according 
to claim 5, wherein said step (Q is executed prior to 
said step (B). 
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